3 ms·
> Firefox has always been the most versatile and secure way to browse the web. Currently, a Chrome full-chain is notably harder than a Firefox full-chain, with
by rfoo 3y ago
> Firefox has always been the most versatile and secure way to browse the web.
Currently, a Chrome full-chain is notably harder than a Firefox full-chain, with the former being at "state actor ITW" level, and the latter being at "your friends started a never-heard of consultancy and they decided to do the classical trick - pwning Firefox at Pwn2Own" level.
- INTPenis 3y agoYeah but if Google keeps removing the ability to block content then Firefox will be more secure simply by filtering dynamic content from unknown domains. Drive by attacks are the most common way to spread malware, this is exactly what extensions like noscript prevent. This isn't the first time Chrome has crippled user ability to filter content on a deep level. So it doesn't matter how much hardening Chrome has if it allows for drive by download attacks from unknown domains.
- rfoo 3y agoSure, I just hope people move to contribute hardening features to Firefox, and the first step would be singing out loud that Firefox is not the most secure browser right now. Oh, and I suffer from using NoScript (currently on Chrome, unfortunately) every day, I very much want to have a secure enough browser to not giving me decisions like "do you want to whitelist cdn.jsdelivr.com [1] or click four times for each page you read". [1] It distributes arbitrary shit on github, so good luck whitelisting this "known" domain.
- broodbucket 3y agoI don't think these are especially relevant to the threat models of average users. Security for most people means not getting malware from random sites and not having all their data given away, and noone is blowing an 0day sandbox escape on an average internet user. Adblocking extensions go a very long way in terms of keeping average users safe. If you're a potential target of sophisticated actors (of any level of sophistication above script kiddie) then you're not really the target audience of generic browser advice.
- rfoo 3y agoIndeed. Consider my view points biased cause my threat model does contain being popped by North Korean hackers. And I can't use the Internet without a functioning ad blocker so :(